ja4x certificate template

JA4X 2166164053c1…

421 convicted hosts presented certificates built from one template: the same certificate fields, in the same order. A shared template points to shared tooling.

2166164053c1_2166164053c1_30d204a01551

feed checked TLP:CLEAR
hosts 421 418 still listed
listings 500
networks 123
first seen 2026-08-22

Ports

:50050185:44398:844326:1844314:88884:370014:3003:44433

The 8 ports with the most hosts, of 145.

Detection packs

Rules for this hub's 418 still-listed hosts, across all 5 pages of the list, updated with the archive. Withdrawn hosts can stay in these files for up to five minutes. Each listener gets one Suricata rule on its address and port, with the same rule ID in every file: load one set, or let suricata-update merge them. A newer file replaces an older one. YARA rules match file hashes only.

Cohorts

Hosts on this template that also share an issuer name and a not-before day: one issuance step run for several hosts. Kinship, not attribution.

Showing the 8 largest of 12. Every cohort is in the cohort directory.

Hosts · page 4 of 5

Newest first by first seen, so later pages shift as hosts are added. Archived hosts are included and marked.

103.6.169.62Cobalt StrikeAS36007 · Kamateralast confirmed 2026-09-0162.72.42.58Cobalt StrikeAS141995 · Contabo Asia Privatelast confirmed 2026-10-13106.55.25.253Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-08-31218.244.142.4Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-09-14106.15.10.2Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-10-2324.199.90.142Cobalt StrikeAS14061 · DigitalOceanlast confirmed 2026-09-09216.203.20.232Cobalt StrikeAS399629 · BL Networkslast confirmed 2026-09-09104.168.102.116Cobalt StrikeAS36352 · HostPapalast confirmed 2026-09-09101.42.136.73Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-09-05196.251.121.183Cobalt StrikeAS205759last confirmed 2026-09-23115.159.226.190Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-08-308.134.166.14Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-09-02157.66.26.124Cobalt StrikeAS149107 · TRUMVPS COMPANYlast confirmed 2026-09-09117.50.184.221Cobalt StrikeAS23724 · IDC, China Telecommunicationslast confirmed 2026-09-15156.239.252.191Cobalt StrikeAS62468 · VpsQuanlast confirmed 2026-10-30179.43.186.214Cobalt StrikeAS51852 · Private Layerlast confirmed 2026-10-3047.109.198.8Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-09-15111.229.248.198Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-09-18169.239.128.43Cobalt StrikeAS61138 · Zappie Hostlast confirmed 2026-10-23217.154.212.25Cobalt StrikeAS8560 · IONOS SElast confirmed 2026-10-2747.79.21.106Cobalt StrikeAS45102 · Alibaba (US) Technologylast confirmed 2026-09-11209.200.246.194Cobalt StrikeAS215311 · Regxa Company for Information Technol…last confirmed 2026-09-12117.72.182.5Cobalt StrikeAS141679 · China Telecom Beijing Tianjin Hebei B…last confirmed 2026-10-308.163.98.217Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-10-30122.51.16.188Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-08-28207.57.134.202Cobalt StrikeAS139659 · LUCIDACLOUDlast confirmed 2026-08-27120.76.143.184Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-10-2223.95.170.223Cobalt StrikeAS36352 · HostPapalast confirmed 2026-09-0947.94.224.229Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-09-0847.113.98.42Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-10-1347.104.248.7Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-10-2734.92.128.98Cobalt StrikeAS396982 · Googlelast confirmed 2026-09-1023.141.12.111Cobalt StrikeAS152918 · Liberally Networklast confirmed 2026-09-02159.75.123.199Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-09-12120.55.3.157Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-10-20118.89.79.131Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-06113.52.135.27Cobalt StrikeAS133380 · Layerstacklast confirmed 2026-10-23101.200.193.211Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-10-30156.40.156.39Cobalt StrikeAS3527 · National Institutes of Healthlast confirmed 2026-09-25124.222.209.39Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-09-158.163.49.50Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-09-15193.112.191.222Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-30192.144.171.134Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-30175.178.230.164Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-08-29129.28.122.92Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-30101.33.200.145Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-08-2962.234.72.163Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-09-26121.4.38.18Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-3043.138.104.38Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-09-23118.24.42.214Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-30120.53.238.38Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-3047.84.50.235Cobalt StrikeAS45102 · Alibaba (US) Technologylast confirmed 2026-10-3047.103.213.138Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-09-068.222.188.173Cobalt StrikeAS45102 · Alibaba (US) Technologylast confirmed 2026-09-1134.68.221.226Cobalt StrikeAS396982 · Googlelast confirmed 2026-09-1554.158.87.112Cobalt StrikeAS14618 · Amazon.comlast confirmed 2026-10-1945.9.249.179Cobalt StrikeAS9009 · M247 Europelast confirmed 2026-10-3034.56.42.78Cobalt StrikeAS396982 · Googlelast confirmed 2026-08-288.219.220.240Cobalt StrikeAS45102 · Alibaba (US) Technologylast confirmed 2026-10-2052.248.41.253Cobalt StrikeAS8075 · Microsoftlast confirmed 2026-10-224.253.8.171Cobalt StrikeAS8075 · Microsoftlast confirmed 2026-09-24154.91.85.44Cobalt StrikeAS399077 · Tcloudnetlast confirmed 2026-09-02117.72.181.104Cobalt StrikeAS141679 · China Telecom Beijing Tianjin Hebei B…last confirmed 2026-10-3060.247.206.23Cobalt StrikeAS38283 · CHINANET SiChuan Telecom Internet Dat…last confirmed 2026-10-308.137.169.91Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-10-30222.255.215.42Cobalt StrikeAS45899 · VNPTlast confirmed 2026-10-30175.27.214.144Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-08-28124.222.28.189Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-09-14106.53.61.9Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-30113.45.253.80Cobalt StrikeAS55990 · Huawei Cloud Service data centerlast confirmed 2026-10-17192.252.179.24Cobalt StrikeAS152194 · CTG Serverlast confirmed 2026-09-10192.252.185.78Cobalt StrikeAS152194 · CTG Serverlast confirmed 2026-10-30154.221.25.38Cobalt StrikeAS142403 · YISU CLOUDlast confirmed 2026-09-0591.92.240.238Cobalt StrikeAS202412 · Omegatechlast confirmed 2026-08-27152.32.132.82Cobalt StrikeAS135377 · UCLOUD INFORMATION TECHNOLOGY (HK)last confirmed 2026-10-30115.190.161.178Cobalt StrikeAS137718 · Beijing Volcano Engine Technologylast confirmed 2026-09-15101.126.10.34Cobalt StrikeAS137718 · Beijing Volcano Engine Technologylast confirmed 2026-09-16101.43.103.154Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-08-25101.42.255.92Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-3082.156.219.31Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-3047.108.25.113Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-09-3047.105.36.109Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-10-3047.101.51.235Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-08-2647.92.208.27Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-10-2147.82.234.12Cobalt StrikeAS45102 · Alibaba (US) Technologylast confirmed 2026-09-02176.123.9.232Cobalt StrikeAS200019 · ALEXHOSTlast confirmed 2026-10-12119.45.225.53Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-08-2843.108.51.124Cobalt StrikeAS45102 · Alibaba (US) Technologylast confirmed 2026-10-3039.105.200.188Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-08-258.152.212.104Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-10-3095.182.114.29Cobalt StrikeAS56971 · CGI GLOBALlast confirmed 2026-10-1182.157.183.28Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-068.134.70.73Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-09-0943.139.108.161Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-0647.120.32.72Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-10-3047.86.9.253Cobalt StrikeAS45102 · Alibaba (US) Technologylast confirmed 2026-09-1642.194.241.92Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-06210.56.48.227Cobalt StrikeAS152194 · CTG Serverlast confirmed 2026-09-0220.187.120.42Cobalt StrikeAS8075 · Microsoftlast confirmed 2026-09-0820.15.58.107Cobalt StrikeAS8075 · Microsoftlast confirmed 2026-10-09